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CLAIMS 

What is claimed is: 

1. A method for remotely monitoring the operation of a communication 
device, comprising the steps \of: 

receiving a cdSpimunication at the communication device; 
determining whether the communication comprises a security risk; and 
in response tol determining that the communication comprises a security 
risk, transmitting an alert signsfl to a remote monitoring center. 



2. The method or Claim 1, wherein the determining step comprises 
comparing the communication to a plurality of known security risks to determine if the 
communication comprises one of the plurality of known security risks. 

3. The method of Claim 2, wherein the determining step further comprises 
classifying the communication as|a high priority event or a low priority event based upon 
the comparison. 



4. The method of Claim 3, further comprising the steps of: 

in response to classifying the communication as a high priority event, 
determining whether the communication should be terminated; and 

in response to determining that the communication should be terminated, 
terminating the communication of tl ie communication device. 

5. The method of Clair i 1, further comprising the steps of: 
receiving the alert signal at the remote monitoring center; and 

in response to receiving the alert signal, assigning a priority to the alert 
signal based upon a type of the communication. 
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6. The method of Claim 5, further comprising the step of forwarding the 
alert signal to a monitoring afeent based upon the assigned priority of the alert signal. 

7. The method on Claim 6, further comprising the steps of: 
receiving the albrt signal at the monitoring agent; 

resolving a resolution to the communication causing the alert signal; and 
contacting a user of the communication device with the resolution to the 
alert signal based on the analysis of the communication. 
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for remotely configuring a communication device, comprising 

g a network address for the communication device; 
ing a wake-up signal, comprising the network address from the 
a remote computer; and 

to receiving the wake-up signal, transmitting configuration 
remote computer to the communication device at the network 



10 9. The 

communication device 
communication device 
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method of Claim 8, further comprising the step of activating the 
ind implementing a plurality of security policies within the 
J >r identifying security risks at the communication device. 



10. The metlod of Claim 8, wherein the step of transmitting the wake-up 
signal comprises the ste{ s of: 

transmitting a first identification number and a network address via an 
encrypted communications channel; 

the first identification number and the network address at the 
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receiving 
remote computer; and 

recording 
database at the remote co! 



the first identification number and the network address in a first 
tputer. 
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1 1 . The mbthod of Claim 10, further comprising the steps of: 

transmitting a plurality of diagnostic variables from the communication 
device to the remote computer via the encrypted communications channel; 

receiving the diagnostic variables at the remote computer; and 
determining whether the communication device is functioning properly 
based upon the diagnostic! variables. 

12. The method of Claim 10, further comprising the steps of: 
transmitting status information along with the first identification number 

and the network address via the encrypted communications channel; 

receiving thd status information at the remote computer; 

recording tha status information in the first database; and 

determining Whether the communication device meets a plurality of 

operational requirements basdd upon the status information. 

13. The method oi Claim 12, wherein the step of determining whether the 
communication device meets ablurality of operational requirements further comprises the 

steps of: \ 

determining whether the communication device requires a software patch 

based upon the status information; and 

in response to determining that the communication device requires the 
software patch, transmitting the software patch to the communication device. 
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14. The method of Claim 13, wherein the step of transmitting the software 

patch comprises the steps of: 

moving trie software patch to a queue in response to determining that the 
communication device requires a software patch; and 

transmitting the queued software patch to the communication device in 
response to receiving configuration information. 
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15. The method! of Claim 14, wherein the software patch is transmitted to the 
communication device via an encrypted communications channel. 

16. The methodlof Claim 15, further comprising the steps of: 
receiving the! software patch at the communication device; 
applying the software patch to the communication device; and 
transmitting A configuration complete signal from the new communication 

device to the remote, computer. 
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17. The method of Claim 16, further comprising the steps of: 

receiving the configuration complete signal at the remote computer; 
performing a vulnerability analysis on the communication device; 
determining whether the vulnerability analysis failed; and 
in response to determining that the vulnerability analysis failed, requesting 
modified configuration information. 
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18. A method for remotely configuring a communication device, comprising 
the steps of: 

if-st identification number and a network address via an 
encrypted communications channel; 

receiving the fiyst identification number and the network address at the 
remote computer; 

recording the fifrst identification number and the network address in a first 
database at the remote computer, wherein the network address is associated with the first 
identification number; 

receiving a refauest to configure the communication device comprising a 
second identification numberj at the remote computer; 

matching the/second identification number to a first identification number 
stored in the first database; and 

in response to matching the second number to the first number, 
transmitting configuration/ information to the communication device at the network 
address. 



19. The method of Claim 18, further comprising the steps of: 

determining whether the second identification number is valid by 
20 comparing the second identification number with the first identification number in the 
first database; and 

in resporjse to determining that the second identification number is valid, 
receiving a control input 
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20. The method of Claim 19, wherein the step of receiving the control input 
comprises the steps of: 

displaying a plurality of configuration options; and 

receiving! a control input selecting one of the plurality of configuration 
options as a selected option. 
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21. The method of Claim 19, further comprising the step of determining 
whether the selected option comprises a request to configure a new communication 
device. 

22. The methodlof Claim 21, further comprising the steps of: 
in response tp determining that the selected option comprises a request to 

configure a new communication device, receiving configuration information for the 
communication device comprising at least one billing parameter corresponding to a user 
of the communication device; land 

transmitting initiation information to the communication device. 



23. The method of Claim 22, wherein the step of transmitting the initiation 
information comprises the step pf transmitting a correct time, a download queue, and an 
20 activation code, to the communication device via an encrypted communications channel. 



24. The method of Claim 22, further comprising the step of notifying a user 
of the communication device that tme communication device is active. 
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25. The method of Claim 22, further comprising the steps of: 
receiving a configuration complete signal at the remote computer; 
performing a vulnerability analysis on the communication device; 
determining whether the vulnerability analysis failed; and 

5 in response Jo determining that the vulnerability analysis failed, requesting 

modified configuration information. 

26. The method lof Claim 19, further comprising the step of determining 
whether the selected option \ comprises a request to modify a configuration of the 

1 0 communication device. 
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27. The method of Claim 26, further comprising the steps of: 

in response to determining the selected option comprises a request to 
modify a configuration, receiving the modified configuration information; and 

transmitting the r^odified configuration information to the communication 

device. 



28. The method of Claim 27, wherein the step of transmitting the modified 
configuration information comprises the step of transmitting security policy information 
20 to the communication device via anl encrypted communications channel. 



29. The method of Claim 28, further comprising the step of notifying a user 
of the communication device that the communication device is active. 
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30. A system fbf remotely monitoring a communication device comprising: 
a communication device; and 
a remote monitoring center, 

and wherein the communication device is operative to receive a 
communication , determine Iwhether the communication comprises a security risk, and 
transmit an alert signal to the remote monitoring center upon determination that the 
communication comprises a Security risk, 

and wherein jhe remote monitoring center is operative to receive the alert 
signal, assign a priority on thfe alert signal, transmit the alert signal to a monitoring agent 
based upon the assigned priority, analyze the communication, and transmit a resolution to 
a user of the communication device. 
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31. A method for remotely configuring and monitoring a communication 

device, comprising the steps of: 

deternlining a network address for the communication device; 

transmitting a wake-up signal, comprising the network address from the 
communication device to a remote computer; 

in response to receiving the wake-up signal, transmitting configuration 
information from the gemote computer to the communication device at the network 

address; I 

activating tthe communication device to implement a plurality of security 
options within the corAmunication device for identifying security risks at the 
communication device; \ 

receiving a request to configure the communication device at the remote 

computer; I 

in response Jo receiving the request to configure, receiving configuration 
information for the communication device comprising at least one billing parameter 
corresponding to a user of the\ communication device; 

transmitting initiation information to the communication device; 

in response tci receiving the initiation information, initiating remote 
monitoring of the communicaticm device; 

in response to initiating remote monitoring, performing a vulnerability 
analysis on the communication davice; 

determining whethjer the vulnerability analysis failed; 

in response to determining that the vulnerability analysis failed, requesting 
modified configuration information and in response to determining the vulnerability 
analysis passed, continue remote monitoring of the communication device; 

receiving a communication at the communication device; 

determining whether the communication comprises a security risk; 
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in response tb determining that the communication comprises a security 
risk, transmitting an alert sigrkl to a remote monitoring center; 

receiving the alert signal at the remote monitoring center; 
forwarding thelalert signal to a monitoring agent; 
receiving the alfcrt signal at the monitoring agent; 
analyzing the communication; and 

contacting a user of the communication device with an appropriate 
resolution to the alert signal based on the analysis of the communication. 
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32. A commuAication device, comprising: 

a processor; wherein the processor determines a network address for the 
communication device; \ 

a transmitter; wherein the transmitter sends a wake-up signal, comprising 
5 the network address from thfe communication device to a remote computer; 

a receiver, wmerein the receiver receives a communication; 
in response lo receiving the communication, the processor determining 
whether the communication comprises a security risk; and 

in response tq determining the communication comprises a security risk, 
10 the transmitter transmitting anl alert signal to a remote monitoring center. 
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33. A method for receiving an alert signal indicative of an attack and resolving 
the attack, comprising the steps of: 

receiving the alert signal at a remote monitoring center; 
logging the information contained in the alert signal in a database; 
5 assigning an order preference to the alert signal based upon the type of 

attack causing the alert signal; 

forwarding the alert signal to a remote agent based upon the order 

preference; and 

analyzing and resolving the attack. 

10 

34. The method of Claim 33, wherein the receiving step comprises receiving a 
first packet comprising the attack causing the alert signal and a priority level associated 
with the attack. 

15 35. The method of Claim 34, wherein the receiving step further comprises 

receiving a second packet comprising information indicative of the specific intrusion rule 
the attack violated. 

36. The method of Claim 33, wherein before performing the logging step, the 
20 database is selected from a plurality of databases based upon an assigned priority of the 
alert signal. 
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31. A rernote monitoring center for receiving an alert signal indicative of an 
attack and resolving tme attack, comprising: 

a receiver, wherein the receiver receives the alert signal; 

a recorder, wherein the recorder logs the information contained in the alert 
signal in a first database; 

a prioritlzer, wherein the prioritizer assigns an order preference to the alert 
signal based upon the rape of attack causing the alert signal; 

a transmitter, wherein the transmitter forwards the alert signal based upon 
the order preference; and! 

a remote lagent, where in the remote agent analyzes and resolves an 
appropriate resolution to the attack. 
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38. A method for determining an attack and transmitting an alert signal, 
comprising the steps 

receiving a communication at a communication device; 
comparing the communication with a list of known attacks; 
determining whether the communication matches one of the known 

attacks; and 

in responsb to determining the communication matches one of the known 
attacks, transmitting an alert signal to a remote monitoring center. 

" 39. The methqd of Claim 38, wherein the comparing step further comprises 
the steps of: 

disassembling the communication to determine the communication's 
header information; and 

comparing Aie communication's header information to entries in a table 

comprising header information of known attacks. 



40. The method Of Claim 39, further comprising the steps of: 

disassembling the communication to determine the communication's 
body information; 

comparing thel communication's body information to entries in a table 
comprising body information <^f known attacks; 

determining wHich one of the known attacks the communication matches; 

and 

transmitting a placket to the remote monitoring center, wherein the packet 
informs the remote monitoring center which attack the communication matches. 
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